Privacy Notice

Uladzimir Shlykau, in Belarus, operates Human Is Offline and is responsible for this notice. Contact support@humanisoffline.com about privacy requests.

• Account email, name, image, provider account, and session records.
• Cards you create, including public fields and encrypted private blobs.
• Inbox requests, notes, timestamps, and operational metadata.
• Security, delivery, and audit data required to operate the service.
• Organization names, membership and invitation details, GitHub alias identifiers you choose to connect, and usage limits.
• If receipt anchoring is enabled, receipt hashes, timestamps, public receipt metadata, and Ethereum transaction information.
• Optional page performance measurements when you accept analytics.

You may sign in with Google or GitHub when those providers are enabled. They provide account identity information, such as email and basic profile details. Their privacy terms apply to their services. We use OAuth data only to create and secure your Human Is Offline account.

• To authenticate you and protect your account.
• To publish public card content at the links you create.
• To deliver inbox requests and notifications.
• To prevent abuse, resolve incidents, and meet legal obligations.
• To measure page performance when you accept cookies.

Private card fields are encrypted in your browser before upload. The server stores encrypted content only. The private link fragment carries the decryption key and is not sent to the server. See the security overview for details.

We do not sell personal data. Cloudflare provides the Workers hosting environment, D1 database, KV rate limiting, Queues, Durable Objects for live inbox notices, email delivery, and optional Web Analytics. Google and GitHub process sign-in data when you choose those providers. GitHub also receives the alias lookup requests you initiate. An Ethereum JSON-RPC provider may receive anchoring transaction data when optional receipt anchoring is enabled.

When you accept performance analytics, Cloudflare Web Analytics receives page performance measurements from your browser. It does not set advertising cookies or use cross-site tracking. You can change this choice on the cookie notice. Signed-in users keep the same choice across browsers.

We also disclose data when required by law and to people, agents, organization members, or recipients who can access links, inboxes, or other content you choose to share.

Download or delete your account from Profile → Data & privacy. Depending on your location, you may also request access to, correction of, or restriction of processing for your personal data. Contact support@humanisoffline.com for requests you cannot complete in the product.

We retain account, card, inbox, session, and security records for as long as needed to provide the service, resolve disputes, prevent abuse, or comply with law. The service is available worldwide, and data may be processed outside your country of residence.

Human Is Offline is not intended for children under 13, or below the minimum age required by applicable law to use online services without parental consent.

We may update this notice by publishing a new version and effective date here. When a change requires it, signed-in users must accept the current notice before using protected features.